System Management Memory Page Table for Secure Content Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Operating systems on computing devices can be compromised by malicious software, allowing unauthorized access to secure content, such as financial and identification information, due to inadequate security measures.
Innovation Solution
A computing device creates a system management memory page table with executable bits that restrict access to secure content by disabling or setting these bits to prevent lines of code from accessing content outside the system management memory, thereby protecting sensitive information from malicious software.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the operating system manages access to secure content, then access control is provided, but the security can be compromised by malicious software
Solution Approach 1:
The patent segments memory into protected system management memory and other memory areas, with a separate system management page table controlling access. This segmentation isolates secure content from potential malicious software in the operating system, allowing access control while preventing compromise propagation.
Solution Approach 2:
The system management page table acts as an intermediary between the operating system and secure content. It mediates access requests by controlling executable bits, allowing legitimate access while blocking malicious attempts without requiring the operating system to directly manage secure content.
2Reliability
If executable bits are modified to restrict access, then security is enhanced, but access control flexibility is reduced
Solution Approach 1:
The system dynamically modifies executable bits in the system management page table based on runtime conditions. The controller can adjust access permissions as needed, providing both security through restriction and flexibility through dynamic adaptation to different operational requirements.
Solution Approach 2:
The patent changes the state of executable bits as parameters to control access. By modifying these binary parameters (enabled/disabled), the system achieves secure access control while maintaining the ability to adapt permissions based on operational needs, balancing security and flexibility.
Data Source
AI summary
In some examples, a protected memory area inaccessible to an operating system stores information relating to instructions, where the protected memory area includes an indication settable to a first value to indicate that the instructions are allowed to access a memory external of the protected memory area, and a second value to indicate that the instructions are not allowed to access the memory external of the protected memory area. The indication is modified from the first value to the second value to restrict the instructions when executed from accessing the memory external of the protected memory area. In response to modifying the indication, code in the computing device is launched, the launched code comprising the operating system or firmware.